Re: Dictionary type problem

2013-07-11 Thread Alan DeKok
Muhammad Nadeem wrote: > it clearly indicates that it doesnot support hexadecimal type. Could > anyone please tell me , whts the alternative of this. Maybe you can try reading the documentation to learn about the dictionary file format. See "man dictionary". Or even read the raddb/dictionary f

Re: Dictionary type problem

2013-07-11 Thread Muhammad Nadeem
thnaks ,, it is fixed On Thu, Jul 11, 2013 at 11:59 AM, Alan DeKok wrote: > Muhammad Nadeem wrote: > > it clearly indicates that it doesnot support hexadecimal type. Could > > anyone please tell me , whts the alternative of this. > > Maybe you can try reading the documentation to learn about t

Re: Loading fails without reporting an error

2013-07-11 Thread Alan DeKok
Lovaas,Steven wrote: > Hello again, > > I've successfully gotten to the point where local authentication is working > well for all modes, using multiple SSIDs through two virtual servers, so I > felt confident jumping into the less familiar world of proxying. Not that the > concept is hard to u

freeradius seeing anonymous identity as username

2013-07-11 Thread sebastian buettrich
hello all, not really a problem, just a question out of interest: i m reconfiguring a freeradius server for eduroam and extended use of rlm_perl for all kinds of fun stuff, and when testing, i notice that all requests containing an anonymous identity @mydomain.org (regardless of where they co

Re: freeradius seeing anonymous identity as username

2013-07-11 Thread Phil Mayers
On 11/07/13 09:39, sebastian buettrich wrote: is this expected behaviour, the way anonymous identities are implemented, Yes. The outer EAP virtual server only sees the anonymous identity. The inner EAP virtual server can see the real identity. - List info/subscribe/unsubscribe? See http://ww

Re: Indexing multi-valued attrbutes (was RE: 3.0)

2013-07-11 Thread Alan DeKok
Brian Julin wrote: > Just to make sure it was understood during the "foreach" fixup patch I sent > on github, I mentioned that indexed attribute accesses were broken. > None of var[#] var[2] or var[*] work in xlats, unless that's been fixed > recently. That's been fixed. Alan DeKok. - List i

Re: Loading fails without reporting an error

2013-07-11 Thread Adam Bishop
On 11 Jul 2013, at 08:40, Alan DeKok wrote: > Lovaas,Steven wrote: > Hmm... it looks like there's a problem with the file. It doesn't > stop, it *exits*. > > See doc/bugs. That should help finding out where it's exiting. I think I saw this issue a week or so ago - I've not been able to rep

Changing proxy server for a specific user

2013-07-11 Thread Angel L. Mateo
Hello, I have defined a DEFAULT realm proxying requests to a remote radius server (for eduroam). Now I want to create another virtual server using this DEFAULT realm, but proxying requests to another radius server. Is there any way to do this? Maybe modifying some attribute in the reque

Reject a specific realm from a client

2013-07-11 Thread David Aldwinckle
Hello, I have two clients that proxy access requests to me. The realm varies, but the format is always userid@realm.whatever Is there a way that I can deny a specific realm when an access request is received from a specific client? I tried adding something to policy.conf but I couldn't get the

Re: Changing proxy server for a specific user

2013-07-11 Thread Alan DeKok
Angel L. Mateo wrote: > Now I want to create another virtual server using this DEFAULT > realm, but proxying requests to another radius server. Realms are global. You cannot have two DEFAULT realms. > Is there any way to do this? Maybe modifying some attribute in the > request with an

[ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
We are now in feature freeze for 3.0. The configuration format and behaviour for 3.0 will be stable between now and the final release. If you are planning on deploying 3.0 and have an existing 2.x.x configuration you were planning to migrate when the 3.0 is released, now would be a good time to

Re: PEAP using different CA?

2013-07-11 Thread Mathieu Simon
Hi Fernando 2013/7/10 Fernando Hammerli > Got it now, as you said. > > Using the public CA certs on certificate_file (and related private key), > and included the public CA > chain on the CA_file (together with my own CA). > Yep mostly except that I put the private key not inside certificate_fi

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Fajar A. Nugraha
On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell < a.cudba...@freeradius.org> wrote: > We are now in feature freeze for 3.0. The configuration format and > behaviour for 3.0 will be stable between now and the final release. > > If you are planning on deploying 3.0 and have an existing 2.x.x > c

RE: Loading fails without reporting an error

2013-07-11 Thread Lovaas,Steven
Thanks, Adam... this got me looking at the right thing. I had a mismatch between the type of the home_server localhost (auth), and the attribute used in one of the realms pointing to the pool that references that home server (pool, instead of auth_pool). Changing the type of the localhost home_

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 14:09, "Fajar A. Nugraha" wrote: > On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell > wrote: > We are now in feature freeze for 3.0. The configuration format and behaviour > for 3.0 will be stable between now and the final release. > > If you are planning on deploying 3

RE: [ANN] Version 3.0.0-rc0

2013-07-11 Thread stefan.paetow
> > Did you mean https://github.com/FreeRADIUS/freeradius- > server/archive/release_3_0_0_rc0.tar.gz ? I'm afraid I'm getting a build error (from fresh): HEADER src/include/features.h HEADER src/include/missing.h HEADER src/include/tls.h CC jlibtool.c CC src/lib/dict.c CC src/lib/filters.c CC src

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Olivier Beytrison
On 11.07.2013 16:44, stefan.pae...@diamond.ac.uk wrote: >>> Did you mean https://github.com/FreeRADIUS/freeradius- >> server/archive/release_3_0_0_rc0.tar.gz ? > > I'm afraid I'm getting a build error (from fresh): [snip] > /usr/bin/ld: cannot find -lregex > collect2: ld returned 1 exit status > m

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 16:01, Olivier Beytrison wrote: > On 11.07.2013 16:44, stefan.pae...@diamond.ac.uk wrote: Did you mean https://github.com/FreeRADIUS/freeradius- >>> server/archive/release_3_0_0_rc0.tar.gz ? >> >> I'm afraid I'm getting a build error (from fresh): > [snip] >> /usr/bin/ld

RE: [ANN] Version 3.0.0-rc0

2013-07-11 Thread stefan.paetow
Hi Arran, thanks, that's built now. All, CentOS-compatible RPMS, SRPM and .tar.bz2 are at: https://www.dropbox.com/sh/sbqyy7gvzrd3egt/rCKE7aMnku/FreeRADIUS Regards Stefan > -Original Message- > From: freeradius-users- > bounces+stefan.paetow=diamond.ac...@lists.freeradius.org > [mailt

mod_auth_radius w/Apache 2.4.4 ??

2013-07-11 Thread laurence.schuler
I'm trying to use mod_auth_radius(-2.0) with apache 2.4.4 and it does not appear to be working properly. It complains: [:warn] [pid 14690] AuthRadiusActive set, but no RADIUS server IP - missing AddRadiusAuth in this context?) When I have AuthRadiusAuth set, and I can confirm it by changing the hos

maintaining reSIProcate compatibility with FreeRADIUS

2013-07-11 Thread Daniel Pocock
Hi, A few years ago, I adapted the RADIUS client code from SER to work in reSIProcate and specifically the SIP proxy, repro I'm now reviewing the code to work out how to extend it for reTurn, the TURN server and to see if any other changes are necessary. Things have changed slightly since reSIP

How to best configure Radius for my domain ?

2013-07-11 Thread Analyser Great
I am not sure what I am doing wrong but I am just banging my head on a simple problem. I am trying to upgrade from radius 1 to radius 2 and will be using an entire set of new configuration. Currently, I am checking an Ldap attribute "dialupaccess" to allow users to get access to vpn / network dev

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Doug Hardie
On 11 July 2013, at 06:09, Fajar A. Nugraha wrote: > On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell > wrote: > We are now in feature freeze for 3.0. The configuration format and behaviour > for 3.0 will be stable between now and the final release. > > If you are planning on deploying 3.

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 22:39, Doug Hardie wrote: > > On 11 July 2013, at 06:09, Fajar A. Nugraha wrote: > >> On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell >> wrote: >> We are now in feature freeze for 3.0. The configuration format and behaviour >> for 3.0 will be stable between now and t